This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File:                     Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier:          sb/xlezugvTEpagPrOaPb1DyGcPIZMFqemZyaLXM4GI=
Subject key identifier:   00:65:D6:B5:EF:84:CA:3C:D2:FD:72:F5:EF:E6:71:53:81:34:FF:8B
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer:       /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial:       019C43C709A625A3D3FB221AB24990E050BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 19:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:43 +0000
Files and hashes:         1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
                          2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: 2e21o4Z+Ak9egPflImOiGxlBMpumKCsi4n6ehCwt25s=)
                          3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:09:a6:25:a3:d3:fb:22:1a:b2:49:90:e0:50:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
        Validity
            Not Before: Feb  9 19:00:43 2026 GMT
            Not After : Feb 10 19:00:43 2026 GMT
        Subject: CN=0065d6b5ef84ca3cd2fd72f5efe671538134ff8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:9b:e4:cd:6f:36:26:d9:d3:04:13:47:95:
                    5a:6f:96:4e:e5:1d:8d:95:ee:a9:48:55:b4:d0:17:
                    0a:3e:42:8b:07:c0:f5:85:49:14:d8:9c:ee:87:cf:
                    f6:45:7c:08:0b:d8:76:ef:02:c5:af:52:f4:c0:dd:
                    5c:3c:7b:9d:4e:ee:b4:be:da:04:87:98:93:6f:bf:
                    af:f3:d0:f6:98:6a:b9:cf:5c:c4:77:d3:2d:ac:33:
                    c2:37:4f:07:f2:49:7e:31:4e:17:47:03:bb:18:b2:
                    b1:1a:e4:66:fd:45:84:02:71:1f:fd:0d:cb:1e:89:
                    50:21:86:c0:aa:44:da:83:58:7e:6f:52:31:7c:4b:
                    ab:d0:2e:72:5e:34:e7:39:0b:c5:76:28:05:40:05:
                    fb:61:3e:be:e3:a5:c6:7b:ea:d0:f2:8f:3e:1c:ff:
                    b5:88:59:39:06:d6:11:8d:8f:4b:b8:7c:f6:a9:d6:
                    31:69:0a:73:d7:4f:af:20:a6:a1:c5:b0:81:0c:bc:
                    0c:53:69:97:00:d4:10:1c:c2:fa:b4:0b:57:92:0b:
                    e2:51:87:9a:d1:e9:98:04:9b:c6:04:a1:f4:eb:80:
                    12:54:a5:f7:8f:67:a0:d4:90:76:3d:f8:19:75:83:
                    05:89:cd:67:1a:75:ab:8e:cc:48:3f:41:69:ba:17:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:D6:B5:EF:84:CA:3C:D2:FD:72:F5:EF:E6:71:53:81:34:FF:8B
            X509v3 Authority Key Identifier:
                keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:30:38:f2:4e:3f:04:af:d4:47:51:cb:24:4c:aa:f9:8b:2c:
         bd:be:0b:f9:92:a7:9f:e6:24:cf:26:87:df:57:41:43:ed:5d:
         f7:c1:05:01:eb:c3:83:76:1b:75:ea:bd:29:45:0b:67:96:6d:
         5b:f4:ac:80:08:d1:c7:ea:a3:f6:43:f8:fb:95:04:50:a3:9d:
         f9:00:8b:87:cc:7f:42:e4:d4:44:89:29:4a:d3:d6:0f:8b:96:
         13:21:bc:d3:52:94:7e:67:8a:d5:86:d5:91:87:e9:43:be:ca:
         6b:6a:38:f0:f5:cd:20:bb:dd:0f:6a:b4:59:e1:4c:29:e7:c1:
         5a:a9:46:d5:0f:2b:04:79:88:f1:37:d9:e8:77:e4:98:6a:70:
         ea:87:e4:4c:d1:d6:2a:92:02:14:12:91:f7:c9:4b:c0:51:13:
         33:57:32:ba:8f:7e:bb:71:51:5c:be:91:f2:5b:d9:84:02:4a:
         82:6c:98:a4:0a:f7:a0:65:63:01:e6:2c:da:ad:02:99:dd:f3:
         02:3d:41:e7:9c:54:3f:c9:98:13:07:eb:38:64:4a:c3:56:82:
         37:14:2d:2f:f6:a9:da:80:bf:f9:ae:4a:b0:bc:25:b8:4b:f7:
         39:f3:1a:f7:0a:f8:61:ec:04:6e:25:6b:99:bb:dd:5a:d9:80:
         de:7c:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:42 2026 by rpki-client